From 9fad32dff7f387dbaf4043e7dedffb09d9cf5de2 Mon Sep 17 00:00:00 2001
From: Trevor Slocum <trevor@rocketnine.space>
Date: Thu, 11 Mar 2021 14:11:24 -0800
Subject: [PATCH] Add reports page to management panel

---
 imgboard.php    |   9 ++++
 inc/defines.php |   2 +-
 inc/html.php    | 111 +++++++++++++++++++++++++++++++++++++++---------
 3 files changed, 100 insertions(+), 22 deletions(-)

diff --git a/imgboard.php b/imgboard.php
index 97bb146..9f555fd 100644
--- a/imgboard.php
+++ b/imgboard.php
@@ -571,6 +571,11 @@ if (!isset($_GET['delete']) && !isset($_GET['manage']) && (isset($_POST['name'])
 				}
 				rebuildIndexes();
 				$text .= manageInfo(__('Rebuilt board.'));
+			} else if (isset($_GET['reports'])) {
+				if (!TINYIB_REPORT) {
+					fancyDie(__('Reporting is disabled.'));
+				}
+				$text .= manageReportsPage($_GET['reports']);
 			} elseif (isset($_GET['bans'])) {
 				clearExpiredBans();
 
@@ -581,6 +586,10 @@ if (!isset($_GET['delete']) && !isset($_GET['manage']) && (isset($_POST['name'])
 							fancyDie(__('Sorry, there is already a ban on record for that IP address.'));
 						}
 
+						if (TINYIB_REPORT) {
+							deleteReportsByIP($_POST['ip']);
+						}
+
 						$ban = array();
 						$ban['ip'] = $_POST['ip'];
 						$ban['expire'] = ($_POST['expire'] > 0) ? (time() + $_POST['expire']) : 0;
diff --git a/inc/defines.php b/inc/defines.php
index 4c74320..24c5c60 100644
--- a/inc/defines.php
+++ b/inc/defines.php
@@ -53,7 +53,7 @@ if (!defined('TINYIB_MANAGECAPTCHA')) {
 	define('TINYIB_MANAGECAPTCHA', '');
 }
 if (!defined('TINYIB_REPORT')) {
-	define('TINYIB_REPORT', '');
+	define('TINYIB_REPORT', false);
 }
 if (!defined('TINYIB_REQMOD')) {
 	define('TINYIB_REQMOD', '');
diff --git a/inc/html.php b/inc/html.php
index 1b5db6c..3f50636 100644
--- a/inc/html.php
+++ b/inc/html.php
@@ -748,6 +748,9 @@ function adminBar() {
 
 	$output = '[<a href="?manage">' . __('Status') . '</a>] [';
 	if ($isadmin) {
+		if (TINYIB_REPORT) {
+			$output .= '<a href="?manage&reports">' . __('Reports') . '</a>] [';
+		}
 		$output .= '<a href="?manage&bans">' . __('Bans') . '</a>] [';
 		$output .= '<a href="?manage&keywords">' . __('Keywords') . '</a>] [';
 	}
@@ -849,6 +852,74 @@ function manageLogInForm() {
 EOF;
 }
 
+function manageReportsPage($ip) {
+	$reports = allReports();
+	$report_counts = array();
+	$posts = array();
+	foreach ($reports as $report) {
+		if ($ip != '' && $report['ip'] != $ip && $report['ip'] != hashData($ip)) {
+			continue;
+		}
+
+		$post = postByID($report['post']);
+		if (empty($post)) {
+			continue;
+		}
+
+		if ($ip == '') {
+			$post['reportedby'] = $report['ip'];
+
+			if (!isset($report_counts[$report['ip']])) {
+				$report_counts[$report['ip']] = 0;
+			}
+			$report_counts[$report['ip']]++;
+		}
+
+		$posts[] = $post;
+	}
+
+	$txt_reported = __('Reported posts');
+	if ($ip != '') {
+		if (count($posts) == 1) {
+			$format = __('%1$d report by %2$s');
+		} else {
+			$format = __('%1$d reports by %2$s');
+		}
+		$txt_reported = sprintf($format, count($posts), '<a href="?manage&bans=' . htmlentities($ip, ENT_QUOTES) . '">' . htmlentities($ip) . '</a>');
+	}
+
+	$post_html = '';
+	foreach ($posts as $post) {
+		if ($post_html != '') {
+			$post_html .= '<tr><td colspan="2"><hr></td></tr>';
+		}
+
+		if (isset($post['reportedby'])) {
+			$reportedby_html = '<a href="?manage&bans=' . htmlentities($post['reportedby'], ENT_QUOTES) . '">' . htmlentities($post['reportedby']) . '</a>';
+			if ($report_counts[$post['reportedby']] > 1) {
+				$reportedby_html .= ' <a href="?manage&reports=' . htmlentities($post['reportedby'], ENT_QUOTES) . '">(' . sprintf(__('%d reports'), $report_counts[$post['reportedby']]) . ')</a>';
+			}
+
+			$post_html .= '<tr><td colspan=""><small>' . sprintf(__('Reported by %s'), $reportedby_html) . '</small></td></tr>';
+		}
+
+		$post_html .= '<tr><td>' . buildPost($post, TINYIB_INDEXPAGE) . '</td><td valign="top" align="right"><form method="get" action="?"><input type="hidden" name="manage" value=""><input type="hidden" name="moderate" value="' . $post['id'] . '"><input type="submit" value="' . __('Moderate') . '" class="managebutton"></form></td></tr>';
+	}
+
+	if ($post_html == '') {
+		$post_html = '<i>' . __('There are currently no reported posts.') . '</i>';
+	}
+
+	return <<<EOF
+		<fieldset>
+		<legend>$txt_reported</legend>
+		<table border="0" cellspacing="0" cellpadding="0" width="100%">
+		$post_html
+		</table>
+		</fieldset>
+EOF;
+}
+
 function manageBanForm() {
 	$txt_ban = __('Add a ban');
 	$txt_ban_ip = __('IP Address');
@@ -1187,25 +1258,28 @@ EOF;
 	}
 
 	if (TINYIB_REPORT && !empty($reports)) {
-		$posts = array();
-		foreach ($reports as $report) {
-			$post = postByID($report['post']);
-			if (empty($post)) {
-				continue;
-			}
-			$posts[] = $post;
-		}
-		$txt_recent_posts = __('Reported posts');
+		$status_html = manageReportsPage('');
 	} else {
 		$posts = latestPosts(true);
 		$txt_recent_posts = __('Recent posts');
-	}
-	$post_html = '';
-	foreach ($posts as $post) {
-		if ($post_html != '') {
-			$post_html .= '<tr><td colspan="2"><hr></td></tr>';
+
+		$post_html = '';
+		foreach ($posts as $post) {
+			if ($post_html != '') {
+				$post_html .= '<tr><td colspan="2"><hr></td></tr>';
+			}
+
+			$post_html .= '<tr><td>' . buildPost($post, TINYIB_INDEXPAGE) . '</td><td valign="top" align="right"><form method="get" action="?"><input type="hidden" name="manage" value=""><input type="hidden" name="moderate" value="' . $post['id'] . '"><input type="submit" value="' . __('Moderate') . '" class="managebutton"></form></td></tr>';
 		}
-		$post_html .= '<tr><td>' . buildPost($post, TINYIB_INDEXPAGE) . '</td><td valign="top" align="right"><form method="get" action="?"><input type="hidden" name="manage" value=""><input type="hidden" name="moderate" value="' . $post['id'] . '"><input type="submit" value="' . __('Moderate') . '" class="managebutton"></form></td></tr>';
+
+		$status_html = <<<EOF
+		<fieldset>
+		<legend>$txt_recent_posts</legend>
+		<table border="0" cellspacing="0" cellpadding="0" width="100%">
+			$post_html
+		</table>
+		</fieldset>
+EOF;
 	}
 
 	$txt_status = __('Status');
@@ -1228,12 +1302,7 @@ EOF;
 
 	$reqmod_html
 	
-	<fieldset>
-	<legend>$txt_recent_posts</legend>
-	<table border="0" cellspacing="0" cellpadding="0" width="100%">
-	$post_html
-	</table>
-	</fieldset>
+	$status_html
 	
 	</fieldset>
 	<br>